Troubleshooting the Exchange Management Shell

While using the remote Exchange Management Shell with Microsoft Exchange Server 2010, you may encounter problems. You can use the information in this topic to diagnose and resolve client and connection issues.

This topic addresses problems with the Shell that administrators of on-premises installations of Exchange 2010 might encounter. If you're troubleshooting problems with the remote Shell for your Microsoft Office Outlook Web App organization, see Windows PowerShell: FAQ for Administrators.

You might get the following error message when you attempt to open the Shell using the instructions in the topic Open the Shell. The error is caused by setting the script execution policy in Windows PowerShell to Restricted or AllSigned. To resolve this issue, you need to set the script execution policy to RemoteSigned. For more information, see Install Windows Management Framework.

You might get the following error message when you use the ForEach cmdlet in a pipeline and the following circumstances are true:

The ForEach cmdlet accepts data from a cmdlet earlier in the pipeline.

The script block on the ForEach cmdlet contains a cmdlet.

This error is caused because the Windows PowerShell remoting feature doesn't support more than one pipeline running at the same time. To resolve this issue, store the output of the cmdlet earlier in the pipeline in a variable, and then pipe the data stored in the variable to the ForEach cmdlet. This example results in a concurrent pipeline error.

You might get the following error messages if you don't have the correct version of Windows PowerShell installed. You must have Windows PowerShell 2.0, available in Windows Management Framework, to connect to a remote Exchange 2010 server. For more information, see Install Windows Management Framework.

You might receive the following error message if you have Windows PowerShell 1.0 installed.

You can receive the following error message if a user tries to connect to a remote Exchange 2010 server and the remote Shell isn't enabled. For more information about how to enable users for the remote Shell, see Enable Remote Exchange Management Shell for a User.

[ExchServer] Connecting to remote server failed with the following error message : The WinRM client cannot process the
request. It cannot determine the content type of the HTTP response from the destination computer. The content type is a
bsent or invalid. For more information, see the about_Remote_Troubleshooting Help topic.
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportExc
eption
+ FullyQualifiedErrorId : PSSessionOpenFailed

[exchserver01] Connecting to remote server failed with the following error message : WinRM cannot process the request.
The following error occured while using Kerberos authentication: The network path was not found.
Possible causes are:
-The user name or password specified are invalid.
-Kerberos is used when no authentication method and no user name are specified.
-Kerberos accepts domain user names, but not local user names.
-The Service Principal Name (SPN) for the remote computer name and port does not exist.
-The client and remote computers are in different domains and there is no trust between the two domains.
After checking for the above issues, try the following:
-Check the Event Viewer for events related to authentication.
-Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or us
e HTTPS transport.
Note that computers in the TrustedHosts list might not be authenticated.
-For more information about WinRM configuration, run the following command: winrm help config. For more information,
see the about_Remote_Troubleshooting Help topic.
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportExc
eption
+ FullyQualifiedErrorId : PSSessionOpenFailed

You might receive an error message when connecting to a remote Exchange 2010 server if you use the HTTPS protocol. This error occurs because your computer doesn't trust the certification authority (CA) used to sign the Secure Sockets Layer (SSL) certificate used by the remote server. To connect to a remote Exchange 2010 server, you must use the HTTP protocol and the Kerberos authentication method. For more information, see Connect Remote Exchange Management Shell to an Exchange Server.

[ExchServer] Connecting to remote server failed with the following error message : The server certificate on the destin
ation computer (ExchServer:443) has the following errors:
The SSL certificate is signed by an unknown certificate authority. For more information, see the about_Remote_Troublesh
ooting Help topic.
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportExc
eption
+ FullyQualifiedErrorId : PSSessionOpenFailed

You might receive the following error message if you specify an incorrect value for the ConnectionName parameter when connecting to a remote Exchange 2010 server. You must use the value Microsoft.Exchange with the ConnectionName parameter. For more information, see Connect Remote Exchange Management Shell to an Exchange Server.

[ExchServer] Connecting to remote server failed with the following error message : The WS-Management service cannot pro
cess the request. The resource URI (http://schemas.microsoft.com/powershell/MS.Exch) was not found in the WS-Management
catalog. The catalog contains the metadata that describes resources, or logical endpoints. For more information, see t
he about_Remote_Troubleshooting Help topic.
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportExc
eption
+ FullyQualifiedErrorId : PSSessionOpenFailed

You might receive one of the following error messages when connecting to a remote Exchange 2010 server if you specify an authentication method other than Kerberos. To connect to a remote Exchange 2010 server, you must use Kerberos authentication and the HTTP protocol. For more information, see Connect Remote Exchange Management Shell to an Exchange Server.

[ExchServer] Connecting to remote server failed with the following error message : The WinRM client cannot process the
request. CredSSP authentication is currently disabled in the client configuration. Change the client configuration and
try the request again. CredSSP authentication must also be enabled in the server configuration. Also, Group Policy must
be edited to allow credential delegation to the target computer. Use gpedit.msc and look at the following policy: Comp
uter Configuration -> Administrative Templates -> System -> Credentials Delegation -> Allow Delegating Fresh Credential
s. Verify that it is enabled and configured with an SPN appropriate for the target computer. For example, for a target
computer name "myserver.domain.com", the SPN can be one of the following: WSMAN/myserver.domain.com or WSMAN/*.domain.
com For more information, see the about_Remote_Troubleshooting Help topic.
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportExc
eption
+ FullyQualifiedErrorId : PSSessionOpenFailed

[ExchServer] Connecting to remote server failed with the following error message : The WinRM client cannot process the
request. Default credentials can be used only with Kerberos authentication or Negotiate authentication under HTTPS if t
he Allow implicit credentials for Negotiate is specified. Explicit credentials must be provided if any other authentica
tion scheme is specified. For more information, see the about_Remote_Troubleshooting Help topic.
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportExc
eption
+ FullyQualifiedErrorId : PSSessionOpenFailed

[ExchServer] Connecting to remote server failed with the following error message : The WinRM client cannot process the
request. If the authentication scheme is different from Kerberos, or if the client computer is not joined to a domain,
then HTTPS transport must be used or the destination machine must be added to the TrustedHosts configuration setting. U
se winrm.cmd to configure TrustedHosts. Note that computers in the TrustedHosts list might not be authenticated. You ca
n get more information about that by running the following command: winrm help config. For more information, see the ab
out_Remote_Troubleshooting Help topic.
+ CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportExc
eption
+ FullyQualifiedErrorId : PSSessionOpenFailed